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I consider quantum protocols for clock synchronization, 
and investigate in particular whether entanglement distilla- 
tion or quantum error-correcting codes can improve the ro- 
bustness of these protocols. I also draw attention to some 
unanswered questions about the relativistic theory of quan- 
tum measurement. This paper is based on a talk given at the 
NASA-DoD Workshop on Quantum Information and Clock 
Synchronization for Space Applications (QuICSSA), Septem- 
ber 25-26, 2000. 



I. INTRODUCTION 

The theme of this workshop, clock synchronization, has 
occupied a prominent position at the frontier of technol- 
ogy for a long time. From a recent article by Peter Gal- 
ison Q, I learned that the International Conference on 
Chronometry in 1900 included a session devoted to the 
problem of clock synchronization. This was an urgent 
problem at the time, especially in Europe, where a single 
track would often carry railroad traffic in both directions, 
so that precise scheduling was necessary to avoid disas- 
trous collisions. 

According to Galison, the technical community's keen 
interest in clock coordination 100 years ago could not 
have escaped the attention of a certain patent clerk in 
Bern named Einstein pj: 

Meanwhile, all around him, literally, was 
the burgeoning fascination with electrocoor- 
dinated time. Every day Einstein took the 
short stroll from his house, left down the 
Kramgasse to the patent office; every day 
he must have seen the great clock towers 
that presided over Bern with their coordi- 
nated clocks, and the myriad of street clocks 
branched proudly to the central telegraph of- 
fice. 

To Galison, whose work often highlights the role of tech- 
nology in the development of scientific ideas, it is irre- 
sistible to speculate that the preoccupation with clock 
coordination circa 1900 helped to steer Einstein to the 
insight that simultaneity is the key concept for under- 
standing the electrodynamics of moving bodies, and so 
may have inspired the most famous scientific paper of the 
past century. 



To me as a theoretical physicist, a pleasing outcome 
of a workshop like this one would be that our musings 
about clock synchronization lead to conceptual insights 
into the properties of quantum information. Some might 
hope for a flow of ideas in the other direction, but both 
directions can be beneficial. 



II. TWO PROTOCOLS 

Most of this talk will concern a scenario in which two 
parties, Alice and Bob, both have good local clocks that 
are stable and accurate, and wish to synchronize these 
clocks in their common rest frame. One method that 
works, and does not require Alice and Bob to have ac- 
curate knowledge of the distance between them, is Slow 
Clock Transport (SCT), illustrated in Fig. |[ Alice has a 
traveling clock that she synchronizes with her local clock 
(event A) and then sends to Bob, who receives it and 
reads it (event B). When Bob reads the clock it has ad- 
vanced by tab, the proper time along the clock's world 
line that has elapsed during transit. If the clock moved 
slowly, then tab is close to the elapsed time as measured 
by Alice's clock during the transit, so that Bob can syn- 
chronize his clock with Alice's. 
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FIG. 1. Slow Clock Transport. Alice prepares precessing 
qubits, and sends them to Bob, who measures them. Bob 
can estimate the proper time that elapsed, between Alice's 
preparation and Bob's measurement, along the world line of 
the qubits. 

SCT works but it is not very sexy. It would be more 
fun to use a method that exploits the resource of quan- 
tum entanglement, what the JPL group Q called Quan- 
tum (Atomic) Clock Synchronization (QuACS or QCS), 
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illustrated in Fig. ||. So now suppose that Alice and Bob 
have a co-conspirator Charlie, who prepares maximally 
entangled pairs (event C); let's suppose that the state 
of each pair is the singlet state \ip~). Charlie sends half 
of each pair to Alice, and half to Bob. Alice measures 

' ^ of her qubits (event A), 



the observable X 
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and Bob measures X of his qubits (event B) . Comparing 
their results, Alice and Bob can infer the value of 



tbc — t~ac 



(1) 



the proper time along the world line of the qubits that 
moves from A backward in time to C and then forward 
in time to B. If the qubits were transported slowly, this 
difference of proper times is close to the time difference 
tA — tB in the reference frame in which Alice and Bob 
arc at rest. 
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FIG. 2. Quantum Clock Synchronization. Charlie prepares 
entangled pairs of qubits, sends half of each pair to Alice, 
and sends half to Bob. Alice and Bob measure the qubits. 
After communicating classically, they estimate the proper 
time along the world line that travels backward from Alice's 
measurement to Charlie's preparation and then forward from 
Charlie's preparation to Bob's measurement. 

Both protocols work, but QCS is more technically de- 
manding than SCT, so why would we prefer QCS? Per- 
haps if we need to synchronize periodically, rather than 
just once, we'll find it convenient to ship many pairs of 
qubits ahead of time and save them until they are needed, 
rather than sending another clock on demand every time 
we need to synchronize. But when I first heard about 
the idea that quantum information could be used for 
clock synchronization (from Hideo Mabuchi Q), what 
seemed intriguing to me is that we might be able to cor- 
rect phase errors that afflict the traveling qubits, by pu- 
rifying the shared entanglement. In §111- VII, I'll explain 
why I haven't been able to get this idea to work. 



III. QCS WITH FLAWED PAIRS 

To assess whether entanglement purification might im- 
prove the accuracy of clock synchronization, let us be- 
gin by looking at the QCS protocol in more detail. Our 
qubits are two-level atoms, each governed by the Hamil- 
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by Charlie are in the state 
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which is stationary (I'm not bothering to write factors of 
V2 here.) When Alice measures X, obtaining the out- 
come ±1, she prepares for Bob on the same time slice 
the state = \0}b T which evolves after time t 
to |0)s =F e luJt \l)B- Then Bob measures X, obtaining the 
outcome +1 with probability 
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(I =F cos u>t) 



(3) 



Alice and Bob confer so that Bob knows for which qubits 
the result of her X measurement was +1. Then with 
n qubits, the time t can be determined to an accuracy 
At = u- 1 n- 1 / 2 . 

It is instructive to consider what would happen if the 
pairs prepared by Charlie were not really |^ _ )'s, but were 
instead in the state 



|V"(A))ab - \01)ab - e w *\10) ab = 



= i®ui l \^-) 
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This is the state that would be obtained if the time evo- 
lution operator, for Bob's qubit only, were to act on the 
initial state \4)~)ab for time —A. With the pairs in this 
state, when Alice measures X she prepares for Bob one 
b , which will evolve in time t to 



of the states £/" A |=p 



U t UX 1 \T)B = U t . A \T)B 



(•5) 



Therefore, the apparent time offset detected in the QCS 
protocol will be t — A rather than t. If, without telling 
Alice and Bob, Charlie replaces the |^~)'s by |-0~(A))'s, 
then Alice and Bob will think that their clocks are syn- 
chronized even though Bob's really lags behind Alice's 
by A. 



IV. PHASE ERROR CORRECTION FOR CLOCK 
SYNCHRONIZATION? 

If Alice and Bob perform SCT or QCS, dephasing of 
the qubits will weaken the signal. If Bob measures his 
qubit a time t after Alice measures X = ±1 of hers, the 
probability that Bob finds X = 1 is 



P(+) = -(lTVcosut) 



(6) 
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here rj < 1 is the phase damping factor, e.g. r\ = e 
where T is the time that the qubits have been exposed 
to phase noise and T _1 is the damping time. (We have 
assumed that there are no systematic phase errors - the 
noise has zero mean.) 

The damage to the qubits caused by phase damping 
might be reversed by an entanglement purification pro- 
tocol, where an initial supply of noisy entangled pairs is 
"distilled" to a smaller number that approximate \ip~) 
with better fidelity [Q. Such a protocol is illustrated in 
Fig. [| Alice and Bob select two pairs, and each performs 
an operation on her/his half of the two pairs, culminat- 
ing in a bilateral X measurement that destroys one of 
the two pairs. If Alice and Bob get the same measure- 
ment result when they measure pair number 2, then they 
retain pair number 1; otherwise, they throw pair number 
1 away. 



Bob's operations were to systematically lag behind Al- 
ice's by time A, then the protocol would actually distill 
an eigenstate of 

X A ®(U^X B U A ) , (8) 

namely the state |<0~(A)) = / ® U^ 1 ^). 

Therefore, if Alice and Bob first distill their pairs and 
then perform QCS, all they will be able to detect is a 
relative offset, the difference between the offset used in 
the purification protocol and the offset used in QCS. But 
this is information they could discern by reading their 
accurate local clocks. They would not gain anything from 
consuming their shared entanglement. 

V. PHASE STABILIZATION THROUGH 
QUANTUM ERROR-CORRECTING CODES? 
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FIG. 3. Purification protocol that protects entangled pairs 
against phase errors. Alice and Bob compare the phase bits 
of pair 1 and pair 2 by destroying pair 2. If the phase bits 
disagree they discard pair 1 and if the phase bits agree they 
retain pair 1. 

How does it work? Alice and Bob want to have pairs 
with X A <S> X b = —1. Their bilateral procedure allows 
them to measure 



(X A ®X B ) l ■ (X A ®X B ) 2 



±1 



(7) 



The value is —1 if one of the pairs has a phase error, 
and it is +1 if either both pairs are good or both pairs 
are bad. Hence, as long as the original ensemble approx- 
imates l^ - ) with good enough fidelity (e.g., F > 1/2), 
the pairs that are retained have higher fidelity than the 
original pairs. 

We need to notice though, that in order for the purifi- 
cation protocol to achieve its intended purpose, Alice's 
and Bob's operations must be perfectly synchronized. If 



We might try this alternative procedure: To combat 
dephasing, Charlie does not prepare raw entangled pairs 
of qubits, but instead he encodes the pairs using a quan- 
tum error-correcting code that resists phase errors. The 
encoded qubits can be actively stabilized as they travel 
to Alice and Bob, so that they are sure to arrive safely. 
Then Alice and Bob can execute QCS. 

But if phase errors are the enemy then there is a prob- 
lem, because the phase rotation due to the natural evo- 
lution of the raw qubits is one kind of error that the code 
is designed to resist. The stabilization of the encoded 
state freezes this natural evolution. Alice can decode her 
qubit and measure X, but if Bob is still preserving his 
encoded qubit, Alice's action will not "start the clock" of 
Bob's qubit on the same time slice; rather its evolution 
will remain frozen. 

In fact then, all Alice and Bob can learn about if they 
first decode and then execute QCS, is a relative offset: the 
difference of the offset used in decoding and the offset of 
the final measurements. Again, this is information that 
can be inferred by referring to Alice's and Bob's local 
clocks. 

The difficulty we have encountered here is closely re- 
lated to the obstacle that has so far prevented us from 
finding a powerful way to use quantum error-correcting 
codes to improve frequency standards. We would like 
to use quantum error correction to stabilize a precessing 
qubit that can serve as an accurate standard; therefore 
the natural evolution of the qubits should preserve the 
code subspace (i.e., should commute with the code sta- 
bilizer). This requirement strongly restricts the error- 
correcting power of the code. 

One code with the desired property is the repetition 
code, which can correct coherent bit flip errors (that is, 
stochastic X errors); the encoded state evolves as 



\ip(t) = |000...0) +e l 



1111. ..1) 



(9) 



This is just the rapidly precessing cat state whose ad- 
vantages have been extolled by the NIST group M. If 
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the limiting factor in the accuracy of the standard were 
a "bit-flip" channel, then this state could be actively sta- 
bilized by quantum error correction. 

As a mathematical statement, this is not completely 
vacuous, since it is possible in principle for the precision 
in the measurement of the precession rate to be limited 
by bit-flip errors. Fig. |^ shows the decay of the polariza- 
tion of a qubit, found by integrating the master equation, 
for a bit-flip channel and a dephasing channel with com- 
parable rates. Qualitatively, they are similar; the visible 
difference is that the bit-flips (X errors) do not damage 
the x-component of the polarization. The bit-flip dam- 
age can be controlled by the quantum repetition code; 
the phase damping cannot be. 

While correct as a mathematical statement, this is not 
a very useful observation, since I don't know of any re- 
alistic physical setting in which a bit-flip channel really 
limits the accuracy of an interesting measurement. 




FIG. 4. Depolarizing spins. The time evolving polarization 
of a qubit, found by integrating the master equation, is shown 
for a bit flip channel (left) and a dephasing channel (right). 



VI. QUANTUM OR CLASSICAL? 

What is really "quantum" about the QCS protocol? 
Of course, each "clock" is a qubit, so when we read it 
we acquire at best one bit of information, and we need 
many qubits to estimate a time offset accurately. But 
it is worthwhile to emphasize that the correlations that 
were exploited might as well have been classical rather 
than quantum correlations. That is, although we have 
said that the QCS protocol exploits entanglement, we 
have only used the property that the state \iP~)ab has 
two qubits with correlated values of X; it makes no dif- 
ference to us that the qubits are also correlated in the 
complementary variable Z. 

Therefore, it would work nearly as well for Charlie to 
prepare a product state \+)a ® \~)b- Unlike the entan- 
gled state \iP~)ab, this state is not stationary; in time T 
it evolves to 



(|0) A + e iwT |l) A )®(|0)B-e- T |l) B ) . (10) 

If Alice and Bob both measure X, how strongly corre- 
lated their results are depends on the time offset of their 
measurements, as is the case if Charlie prepares | - _ )'s. 

Specifically, if there is no dephasing of the qubits, then 
if Bob measures a time t after Alice, and we average over 
the time T since Charlie's preparation (which is assumed 
to be completely unknown), then the probability that 
Bob finds X = +1 if Alice docs is 

P{+ B \+A\t) = ^(l-^COSUJt\ . (11) 

The signal is weaker then if Alice and Bob perform QCS, 
so that they need 4n product pairs to find t to the same 
accuracy as with n entangled pairs, but that is not a very 
heavy price to pay in return for the advantages of working 
with product states rather than entangled states. 

(Of course, with SCT we don't have to pay even that 
price - n qubits sent from Alice to Bob are as effective 
as n entangled pairs measured by Alice and Bob.) 

What about the purification? Since it involves coher- 
ent processing, there may seem to be something quantum 
about it — I'm not sure I would know how to make a col- 
lective observation on two pairs of analog classical clocks 
without actually reading each clock. But since the corre- 
lations are essentially classical, we are not really making 
any use of the essentially quantum features of entangle- 
ment purification. 

If we are really interested in, say, using our entangle- 
ment for EPR quantum key distribution, then purifica- 
tion may be essential for achieving quantum privacy am- 
plification — it is how we ensure that no potential eaves- 
dropper has more than a negligible amount of informa- 
tion about the key. Since in QCS we are really exploiting 
a correlation that is essentially classical, the purification 
doesn't buy us anything, at least if there are no system- 
atic phase errors (if the phase noise has zero mean). For 
example, suppose that our supply of pairs is a mixture 
of |VO's and |V> + )'s with fidelity F: 

p^F\^-){i,'\ + (l-F)\^+)^ + \ . (12) 

Then Bob's measurement of his precessing qubit is gov- 
erned by the probability distribution 

P(+b\+a) = ^ ( J T ( 2F ~ X ) cos ^) ' ( 13 ) 

so that with n pairs we can determine t to accuracy 

At = (2F- l)- 1 ^ 1 ^ 1 ' 2 . (14) 

If we perform one round of purification (perfectly syn- 
chronized), the number of surviving pairs is reduced (on 
average) to 

n' = „.I(F 2 + (1-F) 2 ) , (15) 
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while the fidelity of the remaining pairs improves to 

F 2 

F' = 



F 2 + (l- F) 2 



(16) 



Therefore, if we perform QCS with the remaining pairs 
we can determine t to the accuracy 



At' = At ■ 



2F- 1 
2F' - 1 



V2 ■ (F 2 + (1 - F) 



2\!/2 



(17) 



If the fidelity is close to one, purification hurts, because 
we waste half the pairs needlessly. Even for fidelity F — 
1/2 + e with e -C 1, purification doesn't help: we can 
boost e by a factor of about two, but we're no better 
off because the number of pairs is reduced by a factor of 
about 4. 

In principle, purification might reduce systematic 
phase errors. For example, suppose that all of the pairs 
are identical, but with the unknown phase error 5 



|01> - e i5 |10) 



(18) 



Though the states are maximally entangled, Alice and 
Bob can't fully exploit the entanglement if they don't 
know the value of 6. Now if they execute the (perfectly 
synchronized) purification protocol, the number of pairs 
is reduced (on average) to 



n' = n • ^ [cos 4 (<5/2) + sin 4 (<5/2)] 



(19) 



and the phase of the remaining pairs becomes 5' where 



|tan(<5'/2)| = tan 2 (<5/2) 



(20) 



After a few rounds, 5 is small — Alice and Bob have 
extracted from the initial supply of unknown entangled 
states a smaller number of known entangled states. 

Now this sounds like it could be useful. If Alice and 
Bob perform QCS using the pairs with a systematic phase 
error, that systematic error will show up in their measure- 
ment of their time offset. If they can trade in the original 
pairs with unknown phase for a reduced supply of pairs 
with known phase, it's a win. But as already discussed, 
the "purification" protocol actually replaces the original 
supply with a reduced supply where the phase of the new 
pairs is determined by their time offset and therefore still 
unknown. Alice and Bob are no better off. 

The "recurrence" protocol Q that we have described is 
relatively simple to execute (though still not easy) , but if 
we are willing to do more sophisticated coherent process- 
ing, there are much more efficient protocols that waste far 
fewer pairs. In particular, there is a "hashing" protocol 
|Q , requiring only one-way communication from Alice to 
Bob, that (according to standard Shannon arguments) 
yields, from n initial pairs with fidelity F, a supply of 
distilled pairs, where the fidelity of the distilled pairs is 



as close as desired to 1; the number n! of distilled pairs 
is asymptotically (for large n) close to 



i' = n-[l-H 2 (F)\ , 



(21) 



where H 2 (F) = -F\og 2 F - (1 - F)log 2 (l - F) is the 
binary entropy function. (I'm assuming that the only 
errors we have to worry about are phase errors.) 

This hashing protocol really seems to be a quantum 
protocol: it involves collective measurement of many 
qubits at once, and I don't think there is an analogous 
operation that could be performed on a supply of clas- 
sical analog clocks. Furthermore, since if has a much 
better yield of highly distilled pairs than the recurrence 
protocol, it really does seem to be capable, in principle, of 
significantly improving our sensitivity to the time offset 
between Alice and Bob. 

But there's a problem, really the same problem as that 
encountered when we imagined that Charlie creates en- 
coded pairs that are actively stabilized through quantum 
error correction. To approach the optimal yield of dis- 
tilled pairs given in Eq. ( pl| ) , Alice and Bob use a phase- 
error correcting quantum code that they have agreed on 
in advance. Alice measures the stabilizer generators of 
the code and sends the measurement outcomes to Bob, 
who also measures the same generators and then corrects 
errors to prepare a supply of high fidelity encoded pairs. 
But the pairs are encoded, and the natural evolution of 
the qubits does not preserve the code space. Therefore, 
Alice and Bob need to decode the pairs before performing 
QCS, and once again they will only be able to detect the 
offset in QCS relative to the offset used in the decoding 
(and the measurement of the stabilizer operators). 

In short, if quantum information really offers an ad- 
vantage for clock synchronization, we don't seem to be 
realizing that advantage in the QCS protocol, as far as I 
can see. Perhaps it is because the protocol is really "too 
classical." 



VII. OTHER QUANTUM PROTOCOLS WITH A 
TIME OFFSET 



While there seems to be an obstacle to using entan- 
glement purification to improve the reliability of clock 
synchronization, Alice and Bob can nevertheless use pu- 
rification to enhance the efficacy of other protocols, such 
as EPR key distribution or teleportation, even if they do 
not have synchronized clocks. We have seen that if Bob's 
clock lags behind Alice's by the unknown offset A, then 
by executing the usual distillation procedure, Alice and 
Bob can prepare high fidelity pairs in the state 



1^- (A)) = i®u A i \r 



(22) 



If, say, Alice wants to teleport the unknown state \tp) to 
Bob, then with good |V>~)' s i Alice's joint measurement on 
the unknown state and her member of the entangled pair 
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would prepare in Bob's laboratory on the same time slice 
one of the states cr\ip), where a e {I,X,Y,Z} is known 
from Alice's measurement. If the pairs are in the state 
|^> - (A)) instead, then Alice's measurement prepares 



U A 'a\ 



(23) 



This state evolves in time A to cr\ijj). Therefore, if Bob's 
operation lags behind Alice's by the same amount in both 
the purification and the teleportation, the teleportation 
works normally. 

This is good news, because it means that Alice and 
Bob don't need to know the offset A in order to use pu- 
rification to improve such protocols. But the bad news 
is that (consistent with our earlier observations), after 
purifying Alice and Bob can't use the fidelity of telepor- 
tation as a criterion for judging how well their operations 
are synchronized. 



VIII. OBSERVABLES IN RELATIVISTIC 
QUANTUM THEORY 

Let's return now to the theme with which I began: that 
this workshop invites us to reconsider some aspects of 
quantum information theory in a relativistic setting. In 
fact, there is a question about relativistic quantum theory 
that has bothered me for a while, and ruminating about 
clock synchronization has stimulated me to reconsider it. 

The question is: what is an observable ?. The standard 
answer in quantum field theory is that an observable is 
a self-adjoint operator that can be defined on a spacelike 
slice through spacetime. But this is not the right answer 
in general, not if we mean by an observable something 
that could really be measured in principle. For many self- 
adjoint operators, if they could really be "measured," the 
measurement would allow spacelike-separated parties to 
communicate. 

When I speak of a "measurement" of observable A oc- 
curing on a time-slice, I don't mean that the outcome of 
the measurement is instantly known by anyone. Rather I 
mean that the density operator p decoheres on that time 
slice as 



P - 



e °p e ° 



(24) 



where {E a } is the set of orthogonal projectors onto the 
eigenspaces of the observable. Later on, if information 
from various locations on the slice arrives at a central 
location, the outcome can be inferred and recorded. 

Now suppose that Alice and Bob share a quantum state 
Pab- At time t = — e, Alice performs a unitary transfor- 
mation, Ua, 



P ^{U A ® I)p{U\ ® I) 



(25) 



at time t = the superoperator Eq. (|24|) acts on the 
state, and at time t = e, Bob performs a measurement 
on his density operator, 



p B = tTA 



E a (U A ®I) P AB{U\®I)E a 



(26) 



If Alice and Bob are spacelike separated, then the super- 
operator can be physically realizable only if it is causal - 
Bob's density operator must not depend on the unitary 
transformation that Alice applies. 

How can the causal observables be characterized? Are 
all causal observables physically implementable in prin- 
ciple? 



time 




space 



FIG. 5. An operation on a time slice. If the operation al- 
lows spacelike-separated Alice and Bob to communicate, then 
it is not causal and hence not physically implementable. 

To clarify the concept, let's consider an example, noted 
by Sorkin || , of a measurement that is not causal. It is a 
two-outcome incomplete Bell measurement performed on 
a pair of qubits. The orthogonal projectors correspond- 
ing to the two outcomes are 



Ei = \1)-)(il>-\ , 
E2 = I-\il>-){1>-\ 



(27) 



Suppose that the initial pure state shared by Alice and 
Bob is \00)ab- This state is orthogonal to \^~), so that 
outcome 2 occurs with probability one, and the state is 
unmodified by the superoperator. Afterwards Bob still 
has a density operator ps = |0)(0|. 

But what if, before the superoperator acts, Alice per- 
forms a unitary that rotates the state to |10)ab? Since 
this is an equally weighted superposition of \ip~) an d 
\ip ), the two outcomes occur equiprobably, and in ei- 
ther case the final state is maximally entangled, so that 
Bob's density operator afterwards is pb = 1/2- Bob can 
make a measurement that has a good chance of distin- 
guishing the density operators |0)(0| and 1/2, so that Bob 
can decipher a message sent by Alice. The measurement 
superoperator is acausal. 

An obvious example of an operation that is causal is 
measurement of a tensor product observable A <g> B - 
Alice and Bob can induce decoherence in the basis of 
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eigenstates of a tensor product through only local ac- 
tions. But there are other examples of causal operations 
that are a bit less obvious. One is complete Bell measure- 
ment, i.e. decoherence in the Bell basis {|V' ± )j l?^)}- No 
matter what Alice does, the shared state after Bell mea- 
surement is maximally entangled, so that Bob always has 
Pb = 1/2, and he can't extract any information about 
Alice's activities. Though Bell measurement is a causal 
operation, it is not something that Alice and Bob can 
achieve locally without additional resources. 

Now one wonders, why should there exist causal opera- 
tions that cannot be implemented locally? A possible an- 
swer is that there are previously prepared resources that 
Alice and Bob might share, that while two weak to al- 
low faster-than-light communication, are strong enough 
to enable decoherence in the Bell basis. One such re- 
source might be shared entanglement; in the case of com- 
plete Bell measurement, an even weaker resource will do 
- shared randomness. 

Suppose that Alice and Bob both have the same string 
of random bits. This is a useful resource. In particular, 
the whole idea of quantum key distribution is to establish 
secure shared randomness - Alice uses a random key for 
encoding, Bob for decoding, and if Eve doesn't know the 
key she can't decode the message. The shared random 
string also allows Alice and Bob to induce decoherence 
in the Bell basis. They share a pair of qubits, and on 
the same time slice, they both consult two bits of the 
string; depending on whether they read 00, 01, 10, or 11, 
they both apply the unitary operator /, X, Z, or Y. The 
superoperator 

p -► -[(/«) I)p{I ®I) + {X® X)p{X <g> X) 

+ (Y ®Y)p{Y 8F) + (Z ® Z)p(Z <g> Z)] (28) 

annihilates all the terms in p that are off the diagonal in 
the Bell basis. By a similar method, randomness shared 
by n parties enables decoherence in the basis of simul- 
taneous eigenstates of any set of commuting operators, 
where each operator is a tensor product of Pauli opera- 
tors. 

With Dave Beckman, Daniel Gottesman, and Michael 
Nielsen, I have been mulling over the problem of char- 
acterizing causal operations for several months. At first 
we guessed that any causal superoperator (one that does 
not allow Alice to signal Bob or Bob to signal Alice) 
can be implemented if Alice and Bob share entanglement 
and perform local operations, but Beckman |t[] discovered 
counterexamples. 

All of the cases studied so far are consistent with a 
modified conjecture, suggested by David DiVincenzo: 

Conjecture: A superoperator that does not 
allow Alice to send a signal to Bob can be 
implemented with 

• Local operations by Alice and Bob, 



• One-way quantum communication from 
Bob to Alice. 

Some special cases of this conjecture have been proved 
0, but we have no general proof, and in fact I am far 
from confident that the conjecture holds in general. Even 
if it does, the conjecture does not provide a very satis- 
fying way to characterize the causal operations. On the 
one hand, it is clear that the two resources listed are 
too weak to allow Alice to signal Bob. But on the other 
hand, one-way communication from Bob to Alice is not 
achievable when Alice and Bob are spacelike separated, 
so an operation that can be implemented with these re- 
sources cannot necessarily be applied on a time slice. In 
quantum physics, there is a perplexing gap between what 
is causal and what is local. 



IX. CONCLUDING COMMENTS 

It is a captivating challenge to find ways in which quan- 
tum error correction and/or entanglement purification 
can be invoked to improve the accuracy of clock syn- 
chronization or frequency standards. But my efforts so 
far have not met with much success. 

I'd like to comment here on an issue that I didn't men- 
tion in my talk at the meeting. A problem related to 
the issues I discussed in my talk, but in a sense logically 
independent, arises if we consider in more detail how an 
11 X measurement" is actually performed with real atomic 
clocks: a 7r/2 pulse is applied that rotates X eigenstates 
to Z eigenstates, and then Z is measured. Thus, if both 
Alice and Bob are to measure X, they need to estab- 
lish a "phase lock" to ensure that they are really using 
the same convention to define X. An approach to this 
problem was suggested in Q , but criticized in ||] and || . 

At the meeting, both Dave Wineland and Paul Kwiat 
proposed an alternative approach. They suggested ap- 
plying the concept of a "decoherence-free subspace" |l(]] 
to encode Alice's phase convention in a robust two-qubit 
stationary state that can be sent to Bob. This proposal 
relies on the assumption that two qubits transported to- 
gether will be subjected to identical phase errors in the 
preferred basis {|0), |1)}; thus an eigenstate of the oper- 
ator Z ® I + I ® Z will be invulnerable to phase errors. 
If we encode the logical qubit a|0) + b\l) as 

o|01) + 6|10>, (29) 

then the encoded state resists dephasing. 

Alice and Bob both have local interrogating oscillators 
that are used to apply ir/2 pulses. At the time that 
she calls 0, Alice can apply a pulse that prepares |0) + 
e'^jl), she can encode that state as |01) + e l5 |10), and 
she can send that encoded state to Bob. Bob can decode 
it and measure it at the time he calls T, and thereby (if 
Alice sends many such encoded states), he can lock his 
phase convention at time T to Alice's convention at time 
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0. This shared phase convention might be useful, but 
in itself it does not solve the problem of synchronizing 
Alice's clock with Bob's. 

We can also ask how well the assumptions of a pre- 
ferred dephasing basis, and identical phase errors on 
qubits traveling together, apply in a realistic physical 
setting. These may be reasonable assumptions if |0) and 
|1) are energy eigenstates of a two-level atom, and the 
dephasing is dominated by fluctuating electromagnetic 
fields. The same idea works if |0) and |1) are linear po- 
larization states of a photon, aligned with the preferred 
axes of the optical medium . 

The clock synchronization problem might be viewed as 
an entry into a fascinating subject — relativistic quan- 
tum information theory. I've reported here on some mod- 
est progress toward a better understanding of one issue 
in this theory: the structure of causal observables. 

Observations related to those in this talk appear in a 
recent paper by Yurtsever and Dowling 
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